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The invention relates to a method for accon^lishing state transitions in a 
configurable linear feedback shift register (LFSR) controlled by a clock, the length of the 
LFSR being represented by N, wherein a state vector represents the state of the LFSR, an 
output of liie LFSR comprising JToutput symbols, ^being at least two, and the output 
symbols being generated during one clock cycle, a state transition of the LFSR being 
accomplished during one clock cycle via muMpHcation of the state vector by a state 
transition matrix to the power of fr(niultiple state transition matrix). 

The invention also relates to a configurable linear feedback shift register 
(LFSR) controlled by a clock, the length of the LFSR being represented by iVT, a state vector 
representing the state of tibie LFSR, the LFSR being arranged to generate an output 
comprising fToutput symbols, IFbeing at least two, to generate the output symbols during 
one clock cycle, the LFSR comprising multipUcation means for accomplishing a state 
transition of the LFSR during one clock cycle via multipHcation of the state vector by a state 
transition matrix to the power of (multiple state transition matrix). 



Linear feedback shift registers have a large number of ^Kcations. A 
common example is known fixMn tiie area of third generation (3G) wireless communication, 
in particular mobile phones based on code division multiple access (CDMA) standards and 
base stations using CDMA. Other ^cations are error protection and error correction in 
communication or storage systems, cryptography in communication or storage systems, built- 
in self test (BIST) of memory systems or very large scale integrated (VLSI) circuits and. 
global positioning systems (GPS). 

In general terms, an LFSR is a particular kind of data register which is 
controUed by a clock. The LFSR is characterized by a feedback loop which detemiines the 
contents of the LFSR during a state transition. The behavior of an LFSR, in particular the 
sequence of symbols that is stared after each clock cycle, can be modeled mathematically. In 
this context a symbol represents data, fer example a bit or another numerical value. 
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The mathematical model comprises a state vector to represent the sequence of 
symbols and a state transition matrix to accomplish the state transition. The number of stored 
symbols is referred to as flie lengfli of the LFSR. A new sequence of symbols is generated via 
multipUcation of the state vector by a state transition matrix, thus providing the new contents 
of flie LFSR. The state transition is accomplished during one clock cycle. Also, ou^ut is 
generated during a clock cycle. If a single symbol is generated as output during a clock cycle, 
the LFSR is identified as a single-step LFSR; if at least two symbols are generated as ou^ut ' 
during a clock cycle, the LFSR is identified as a multi-step LFSR. A multi-step linear 
feedback shift register with length iV symbols and step size FTsymbols is referred to as an 
JW?r-LFSR. For examplei if a symboirepresents a bit flien a processor may comprise a 32/16- 
LFSR, which has a length of 32 bits and a step size of 16 bits. 

A configurable LFSR is an LFSR which can be programmed and 
reprogrammed with configuration symbols. The configuration symbols determine the state 
transition of the LFSR. Usually they are a constituent of the state transition matrix. For 
example, in cryptography applications the configuration symbols can represent the coding 
information for computing the new contents of the LFSR during a clock cycle. The number 
of configuration symbols is equal to the length of the LFSR. The state transition matrix 
comprises the configuration symbols, so that the new contents of the LFSR during each clock 
cycle are determined by the configuration of the LFSR. In flie mathematical model of the 
LFSR, the configuration symbols are represented by a generator polynomial. 
configuration of the LFSR is not the same as flie initialization of the LFSR; initialization can 
be done by staring an initial sequence of symbols in the LFSR. 

According to the state of the art, state transitions of multi-step linear feedback 
shift registers can be accomplished via multipUcation of a state vector by a state transition 
matrix WHmes, wherein JTrepresents the step size of the LFSR and the step size is defined 
as the number of output symbols generated during a clock cycle. - If the state transition matrix 
is represented by F, then a W-step LFSR requires multipUcation of the state vector by F, W 
times. The circuit architecture needed to implement this LFSR comprises a stack of W 
AND/XOR slices, wherein an AND sUce con^rises aplmaUty of AND gates and an XOR 
sUce comprises apluraUty of XOR gates. During a clock cycle the state vector, which 
represents the contents of the LFSR, must be muMpUed IFtimes by the state transition 
matrix. As a consequence, the time needed to accompUsh the state transition of tiie LFSR 
grows in proportion to W. The multipUcation of the state vector by tiie state transition matrix 
^times results in a long clock cycle time, causing a problem for several ^pUcations. 
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Instead of multiplying the state vector by the state transition matrix JTtimes 

the state vector can be multiplied by the state transition matrixtothe power of 
transition matrix is represented by F. ften a JT-step LFSR requires multiplication of the stBto 
vector by F'^. This ^oach leads to an acceptable clockcycle time, but flie amount of 
additional AND/XOR gates needed to compute F'^is relatively high. The additional hardware 
IS required to evaluate the large number of con^lex egressions in F'-. The state transition 
matrix tothe power of Wis also referred to as the multiple state transition matrix. 



It is an object of theinvention to provide a mefliodof the kind set forth wMcb^ 
sin5>lifies the multipKcation of the state vector by the mult^jle state transition matrix, m 
order to achieve said object the method is characterized by the characterizing part of claim 1. 

It is another object of the invention to provide a Hnear feedback shift register 
(LFSR) of the kmd set forth which provides multipHcation means for the multiplication of the 
15 state vector by the second matrix and the first matrix, and which provides means to compute 
the first matrix during a configuration stage of the operation of the LFSR. In order to achieve 
said object the LFSR is characterizedby the characterizing part of claim 4. 

m a multi-step LFSR which is controlled by a clock at least two output 
symbols are generated during one clock cycle, m order to ensure an accq,table dock cycle 
20 time a state vector, representing tiie sequence of symbols that is stored in the LFSR, must be 
multiplied by a state transition matrix raised to flie power of wherein JTrepresents the step 
size of the LFSR For example, if the step size is equal to 5 then tiie state vector must be 
multiplied by fl»e state transition matrix to the power of 5. Because F^ contains many 
complex cessions the computation of F^ requhes a large amount of additional AND/XOR 
25 gates. 

The method accordmg to the mvention shnplifies tiie state transition of a 
multi-step LFSR by decomposmg the multiple state transition matrix into two matrices which 
accomplish tiie same state transition. The amount of additional hardware, in particular tiie 
amount of additional AND/XOR gates, is significanfly less for tiie sin^lified state transition. 
30 The embodiment defined in claim 2 is fevorable in an LFSR wherem the 

configuration symbols are not updated very frequentiy. The elements of the first matrix can 

be computed when tire LFSR is bemgconfigmed and the configuration symbols are given. 
This may occur on a regular basis, for example once after every JTclock cycles. ATcan be a 
relatively large number such as 1000. Because tire ccinputation of tire elements of tire first 
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matrix only has to be repeated every JSTclock cycles and the expiessaons in the first matrix are 
relatively simple, computation hereof is not within the critical path of con5)utation. If this is 
the case Ihere is an additional advantage; the clock cycle time may be reduced making use of 
the characteristics of the first matrix. 
5 The embodiment defined in claim 3 is a particularly advantageous 

decomposition of the multiple state transition matrix, providing an exact specification of the . 
elements of the first matrix and the second matrix. 

The LFSR according to claim 4 reflects the decomposition of Ihe multiple 
state transition matrix. 

10 An embodiment defined in claim 5 comprises a fiarst set of logical units fo • 

multiplication of the state vector by the second matrix and a second set of logical units for 
multiplication of Ihe state vector by the first matrix. 

A fiirther embodiment defined in claim 6 ccmqnises a tWrd set of logical unite 
for computation of the first matrix. 
15 The embodiment defined m claim 7 is fevorable if the LFSR is configured on 

a regular basis, but not too firequentiy. The computation of the first matrix, in particular the 
evaluation of the expressions in the first matrix, is not performed during each clock cycle. If 
the interval for configuration of the LFSR is chosen properly, the computation of the first 
matrix is done outeide the critical path of computation because the expressions in the first 
20 matrix are relatively simple and they are not evaluated fiequenfly. 

The embodiment defined in claim 8 provides an extension of the UFSR which 
is favorable if a delayed sequence should be g^erated. 

The invention overcomes the shortcomings of configurable multi-step linear 
feedback shifl: registers because the amount of time needed to generate the output can be 
25 reduced significantiy. This is achieved by minimizing the clock cycle time while the amount 
of additional hardware required to conq)ute the next state of the LFSR is relatively low. 

It is noted that a multi-step linear feedback shift register is known fi-om US 
5,412,665. This multi-step LFSR has length JNTbits and a variable step size Whits, under tiie 
condition that Wis smaller than or equal to N (W< N). The circuit architecture needed to 
30 implement tiiis particular LFSR comprises a stack of WAND/XOR slices. This document 
does not disclose or suggest to deconapose Ihe multiple state transition matrix in a first and a 
second matrix according to the present invention. 
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The present invention is descnTjed in more delaa with refermce to 
drawings, in which: , 

Fig. 1 ilhistrates an 8/1-UrSR and its mathematical model according to the 
state of the art; 

5 2 iMustiates an 8/5-UrsR and ils mathematical model according to the 

state of the ar^ 

Fig. 3 illustrates an 8/5-LFSR and its mathematical model according to the 

invention; 

Fig. 4 illustrates a circuit architecture for a JWr-LFSR according to the 
10 invention; . . . , 

Fig. 5 illustrates a number of variants of an 8/5-LFSR; 
Fig. 6 illustrates a variant of an 8/5-LFSR and its mathematical model 
according to the invention; 

Fig. 7 illustrates a circuit architecture jfor aA7^F-LFSR extended with an 
15 intermediate data register. 



Fig. 1 illustrates an 8/1-LFSR and its mathematical model. A clock 110 : 
controls the LFSR and during each clock cycle the variable t is incremented by 1 . Initially 
variable ^has value *0', after one clock cycle ^ has vahie '1% after two clock cycles ^has . 
value '2' ete. A next-state function 120 accomplishes the state transition of the LFSR during 
a clock cycle and a state vector 130 represents the contents of the LFSR in the maftematical 
model The output 140 during a clock cycle comprises one bit; the LFSR is a single-step 
LFSR. At ^ = 5, i.e. after five clock cycles, five ou^ut bits have been generated. The state 
vect»rl60afterfiveclockcyclesiepresenlstheLFSRat/=5. A state transition is 
acconq,lished during a clock cycle via Ifae next-state fenction 120, in particular via 
mult5)lication of the state vector 130 by a state transition matrix 150. During each clock 
cycle exactly one multipHcation of the state vector by the state transition matrix is perfonned. 
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The state transition matrix F has the following form: 

1 

1 



_ So Si Si Sn-2 S'jv-1. 

The variable JVrepresents the lenglh of the LFSR and the variables go, up to 
S and including gi^.j, also refetred to as the expressions of the state tran^tion matrix^ represent 
the configuration bits of the LFSR, In this case the configuration symbols represent bits. The 
empty values in the matrix must be read as value *0'. The number of conjHguration bits is 
equal to the length of the LFSR, so the next-state function of an 8/1 -LFSR deploys the 
following state transition matrix F: 
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F = 
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As an example, die configuration bits have been given the values g^l, ^/=0, 
g:i=l, g^l, gr=0, gf=lt gd=Q and g7=0. So the state transition matrix F used in the examples 
1 5 of Fig, 1 f Fig. 2 and Fig. 3 is: 



F = 
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Fig. 2 illustrates an 8/5-LFSR and its mafliematical model. Again, a clock 210 
controls the LFSR and during each clock cycle the variable / is inraemented by 1. Initially 
variable ^ has value *0* and afler one clock cycle ^ has vahie T. A next-state function 220 
accon^lishes the stale transition of the LFSR during a clock cycle and a state vector 230 
represents die contents of the LFSR in the mafliematical model The ou^ut 240 during a 
clock cycle comprises five bits; the LFSR is a five-step LFSR At * = 1, ie. after one clock 
cycle, five ou^ut bits have been generated. The state vector 260 after one clock cycle 
represents the LFSR at / = 1 . A state transition is accompHshed during a clock cycle via die 
next-state function 220. However, flie next-state function must now deploy flie state transition 
matrix 150 five times to accompUsh the state transition of the LFSR The state vector is 
multipKed five times by die slate transition matrix 250. This ^yproach requires additional 
hardware compared to a smgle-stq) LFSR and flie clock cyde time increases significanfly. 

Alternatively, flie stale transition matrix 250 is raised to flie power 5 and flien 
flie state vector is multipKed by F* (not shown). This ^oach leads to an acceptable clock 
cycle time, but flie amount of additional hardware required to evaluate tiie expressions in F' 
is relatively high. 

Fig. 3 illustrates an 8/5-LFSR according to flie invention. A clock. 3 10 controls 
flie LFSR and during each clock cycle flie variable t is incremented by 1 . Initially variable t 
has value '0' and after one clock cycle t has value ' 1' . A next-state function 320 
accompUshes flie state transition of flie LFSR during a ctock cycle aud a state vector 330 
represents flie contents of flie LFSR in flie mafliematical model. The ou^ 340 during a 
dock cycle comprises five bits; flie LFSR is a five-step LFSR. At / = 1, ie. after one clock 
cycle, five output bits have been generated The state vector 380 after one clock cycle 
represents flie USR at / = 1 . Again, a state transition is accomplished during a clock cycle 
via flie next-state function. However, flie next-state fimctioii 320 uses a different approach. 
The involution of flie state transition matrix 350, followed by the multiplication of flie state 
vector 330 by flie state transition matrix 350 to flie power of 5, is replaced by a less complex 
mefliod, specifically by multipUcation of tiie state vector 330 by a first matrix 360 and a 
second matrix 370. The first matrix 360 comprises at most 14 different esgrossions, smce JV^+ 
»F+ 1 = 8 -1-5 + 1 = 14. The second matrix 370 also comprises at most 14 different 
expressions, since iV^+ W-\- 1=^8-1-5 + 1 = 14. 

The state transition matrix F is raised to flie power of 5, resulting in F*. The 
matrix F* is decomposed into P5 ♦ G5, wherein P3 is flie first matrix 360'and G5 is flie second 
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matrix 370. In tiiese exanq)les Ihe first matrix 360 and the second matrix 370 respectively 
have the follo^mg forms: 
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In this embodiment Ihe first matrix P5 coniprises 5 different e^xressions (po, pj 
up to and including/?^ and the second matrix G5 conqnises 8 different ejqwessions (go, gj up 
to and including gT), The expressions in Gs do not need to be evaluated, since their values are 
10 already given. The espressions in Ps need to be evahiated, but their complexity is relatively 
low compared to the coinplexity of the e^nessions in F*. In order to illustrate the difference 
in complexity of Ihe ejtpressions, the expressions in P5 and the ejcpressions m the fourth 
column of are given as an exanq)le. The expre^ions in P5 are worked out as follows if 
Ihe symbols represent bits: 

15 

Po = l 

PJ=g7 

Ps^ge + gT 

P3=gS+g7 
20 P4 = g4+g6 + geg7 + g7 
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The expressions in fhe fouitii cohmm of ihe mat^ 



follows: 



r 



^4] = 



0 
0 
0 



S4 

S3 + g4g7 
gi + g4g6 + g3g7 + g4g7 
gl + g4g5 + g3g6 + g2g7 + g3g7 + g4g7 
\^ g0 + g4+ gsgS + g2g6 + g4g6 +glg7 + g2g7 + g3g7 +g4g7 + g4g6g7 ^ 



likewise, the remaxaiiig columns of have five expressions which are 
nmtuaUy dififetent and v«*ich ace different ftom the expressions in other columns. The total = 
number of different exjnessions in equals 40, which clearly exceeds the maximum numbet: 
of 14 different ej^ressions according to the present invention. Furthermore, the remaining 
columns of F' have expressions of similar complexily, so flie overall complexity of F^ is 
significantly higher than Ihe complexily of P5. The expressions go, gi up to and including gy ; 
are simple expressions which represent the configuration bits of the LFSR and the 
expressions po, pi up to and including/?^ have calculated values, dependent on the simple 
expressions go, givsp to and including gj. ... 



For an JWJ^LFSR the elements of the second matrix 370 are defined by 
r 



1 



0 , otherwise 

and the elements of the first matrix 360 are defined by 

c 

1 ,i£i=j /^i<N-W 



0 



, otherwise 
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wherein/?© = 1 and p. = YjS«~i*iPj 0<i<N. 



Using the above-mentioned fonnula to compute the elements of the matrices, 
the first matrix 360 and second matrix 370 are: 
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G5 = 
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Said matrices F^, P5 and Gs are used in the conqnitations performed in the 
example of Fig. 3, In this case i\r equals 8 and JTequals 5. The invention applies to the 
embodiments of an LFSR wilfa variable length and variable step size. Variable JNTrepiesents 
the length of the LFSR and variable ^represents the step size of the LFSR. 

Fig. 4 illustrates a circuit architecture of an N/W-LFSR. according to. the . 
invention. The logical units comprise AND slices and XOR slices. An AND slice comprises a 
plurality of AND gates and an XOR slice comprises a plurality of XOR gates. Taken 
together, the AND/XOR slices are able to perform the multiplication and addition operations 
needed for the vector by matrix multiplication. Three sets of logical units are distinguished: 
a first set 402 of AND slices 408 and XOR slices 410; 
a second set 406 of AMD slices 416 andXOR slices 418; 
a third set 404 of AND slices 412 and XOR slices 414. 
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The generator polynomial 422 represente fl» conflguaaon bite of Ihe LFSR „ 
the maftemaacal model. Tie elemens of the 8»eBt„rpolj«omi.i are med as simple 
exptestions in the state transition tnatiix 350 and ftey are . constituent of the «q»essio«s r. 

Of the fl« n^ 360. 11« contentt of the If SR are r,,«sen«d by fl.e state vector 426 
during a dock cycle 4e strte vector is multiplied by tte secomlmattlx 370. whereupon the 
mlennediato vector is «mlt4,Iied by the first matrix 360. During a clock cycle ou*ut bits 424 
are generated and tte amount of output bits is equal to the stsp si» (Tof the LFSR. 

The muWpHcaaon of flie slate vector 426 by flie second matrix 370 is 
perfcrmedbyae first set 402 of AND sHces 408 andXOR slices 410. The muK^-lication of 
the relating intemediate vector by the first matrix 360 is performedby the second set 406 of 
AND sUces 416 and XOR shoes 418. The thiM set 404 of AND slices 412 and XOR slices 
414 .s deployed to compute fte flm matrix 360, m particular to evalu«e fte «q«ssions«, i. 
Ihe first matrix. 

The embodiments set forth ^ly to an LFSR. which comprises an 
ouw stream and a feedback loop to update contents of the LFSR. tMs kind of LFSR is 

usuaHydq,loyedinagenerator. forexan^leaPseudo Random Noise (PRN) generator The 
only source of irqmt is the feedback loop and the feedback loop comprises a ne^ct-state 
function on flie output. The LFSR set forth has a symbolic fonn 510. 

There are two important variations of this LFSR, as shown in Fig 5 The 
method set forth can also be appHed in these variations. The first variation is usually 
deployed in cycUc redundancy check (CRQ applications or m signature analysis for built-in 

self test (BIST) ofhardware.It has an input stream andafeedback loop toupdateti^^ 
contents of the LFSR, but it does not have an ou^ut stream. The first variation has a 

symboUc form 520. The secondvariationisusuallydeployedmcryptogn^^ I, 
has aninput stream, an output stream andafeedbackloop to update the content 

mcombination with the ii^ut The feedba<* loop is used to encrypt the input stream^ 
ou^t stream is flie encrypted mput stream. The second variation has a symboHc form 530 
The first variation 520 reqmres a slightly different computation of flxe stale 
transition, snice an ii^ut stream must be taken into account. This is illustrated in Fig 6 
Again, a clock 610 controls flie LFSR and during each clock cycle flie variable t is 
mcrementedby 1. Initially variable ^ has value '0' and after one clock cycle /has value A 
next-state function 620 accomplishes tiie state transition of flie LFSR during a clock cycle 
and a state vector 630 represents flie contents of flie LFSR in flie mafliematical model The 
LFSRisafive-stepLFSRbecause it consumes five inputbits. but it does notproduce an 
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ou^ut The input 640 duiiBg a clock cycle comprises five bits. The state vector 690 
represents the contents of the LFSR at r = 1 . The multiple state transition matrix is 
decomposed into a first matrix 650 and a second matrix 660. Next, the state vector 630 is 
multiplied by the second matrix 660. Then an input vector 665 is added to a first intennediate 
5 vector 670; the lower five values of the input vector correspond to the five mput bits. Finally 
a second intennediate vector 680 is multiplied by the first matrix 650. A similar approach for 
coniputation of the state transition can be used for the second variation 530 (not shown). 

It is possible to extend the LFSR according to the requirements imposed by the 
applications in which the LFSR is used, A particularly advantageous extension comprises an 

10 intermediate data register, also referred to as a pipeline register, for generating a delayed 
sequence, as iUustrated in Fig. 7. In this context a delayed sequence is a copy of a sequence 
of symbols, delayed by an arbitrary number of symbols. By initializing the pipeline register 
said number of symbols is set. The sequence of symbols and the delayed sequence are output 
interleaved in time, the sequence of symbols during odd clock cycles and the delayed 

15 sequence during even clock cycles respectively (or just the opposite). A pipeline vector 710 
represents the contmts of the pipeline register. The circuit architecture for this extended 
LFSR remains the same, except that the first set 402 of AND slices 408 and XOR slices 410 
is coupled via the p5>eline register to the second set 406 of AND slices 416 and XOR slices 
418. The pipeline may be implemented as a separate entity as depicted in Fig. 7 or the 

20 pipeline register may be comprised in either the first set 402 or in the second set 406. The 
advantage is that at the cost of merely one additional register in the circuit architecture a 
delayed sequence can be generated during two clock cycles, while the clock cycle time can 
be reduced significantiy. 

It is remarked that the scope of protection of the invention is not restricted to 

25 the embodiments described h^in. Neitiier is the scope of protection of the invention 

restricted by the reference numerals in the claims. The word "comprising* does not exclude 
other parts than those mentioned in a claim. The word 'a(n)' preceding an element does not 
exclude a plurality of those elements. Means forming part of the invention may both be 
implemented in the form of dedicated hardware or in the form of a programmed general 

30 purpose processor. The invention resides in each new feature or combination of features. 
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1 • A method for accomplishing state transitions in a configurable linear feedback 

shift register (LFSR) controlled by a clock (310), the lengfli of the LFSR being represented 
by wherein a state vector (330) represents the state of the LFSR, an ou^ut (340) of the 
U'SR comprising fToutput symbols. ^Tbeing at least two, and the output symbols being 
generated dmng one clock cycle, a state transition of the LFSR being accompKshed during 
<me clock cycle viamultiplication of the sta^veci^ii^^^^^^ ' 

power of r (multiple state transition matrix), characterized in that said m^^^^^ 
transition matrix is decornposed in a first matrix (360) and a second matrix (370), Ae first 
matrix comprismgatmost AT-. 1 different e^^sions and the second matrix comprising 
at most N-^ W+ 1 different expressions. 

2. A method according to claim 1, wherein fte ejqttessions of flie firstmatiix 
(360) are evaluated during a configuration stage of the operation of the LFSR. 

3. A method according to claim 1, wherein the elemeaits of the second matrix 
(370) are defined by 



r 



0 



,if/-/ = r 
, otherwise 



and the elements of the first matrix (360) are defined by 

Pi+j-zm-m^i , if / +J ^ 2N- W- i) 
^ , otiierwise 



14 08.04.2003 
wheiiein/7o=l. Pi =J^gif^+jPj for 0<i<N,mdgo,g]vq?toBndinclu^ggN,jxepres&it 
the configuiatioii syinbols which are comprised in the state traosition matrix (3S0). 

4. A configurable linear feedback shift register (LFSR) controlled by a clock 

5 (310), the length of the LFSR being represented by N, a state vector (330) representing the 
state of the LFSR, the LFSR being arranged to generate an output (340) comprising RP^ output 
symbols, FTbeing at least two, to generate the output symbols during one clock cycle, the 
LFSR comprising multiplication means for accomplishing a state transition of the LFSR 
during one clock cycle via multiplication of the state vector by a state transition matrix (350) 
10 to the power of (multiple state transition matrix), characterized in that said multiple state 
transition matrix is decomposed in a first matrix (360) and a second matrix (370), the first 
. matrix coniprising at most JV+ Jr+ 1 di£ferent e:q)ressions and the second matrix comprising 
at most iV+ W-^ 1 different expressions. 

15 5. A configurable linear feedback shift register (LFSR) according to claim 4, 

characterized in that the multiplication means comprises a first set (402) of logical imits (408, 
410) for performing the multiplication of the state vector (330) by the second matrix (370) 
and a second set (406) of logical units (41 6, 41 8) for performing the multiplication of the 
state vector by the first matrix (360). 

20 

6. A configurable linear feedback shift register (LFSR) according to claim 5, 

characterized in that the LFSR comprises a third set (404) of logical units (412, 414) for 
computing the first matrix (360). 

25 7. A configurable linear feedback shift register (LFSR) according to claim 6, 

characterized in that the third set (404) of logical units (412, 414) is arranged to perform the 
computation of the first matrix (360) during a configuration stage of the operation of the 
LFSR. 

30 8. A configurable linear feedback shift register (LFSR) according to claim 7, 

characterized in that the second set (406) of logical units (41 6, 41 8) is coupled to the first set 
(402) of logical units (408, 410) via an intermediate data register (710). 
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The state transition of a linear feedback shift register (LFSR) controHed by a 
clock (310) with lengfliiyrand step size W, ^Tbeing at least two. is acconq>lished via a next- 
state fiinction (320). The next-state function deploys a state transition matrix (350). The state 
vector (330), which represents the contents of the LFSR, is either multiplied sequentially by 
the state transition matrix or multiplied by the state transition matrix to the power of W 
(multiple state transition matrix). Hie method and the LFSR according to "the inv^iion ^e 
characterized in flmt the multiple state transition matrix is decomposed in a first matrix (360) 
and a second matrix (370), the first matrix comprising at most N+ W+ 1 different 
expressions and the second matrix comprising at most N+ W+ 1 different e^qiressions. The 
LFSR fiirther comprises means to multiply the state vector by the second matrix and the first ' 
matrix, and means for computing the first matrix. The invention overcomes the shorteomings • 
of configurable multi-stq, linear feedback shift registers because the amount of time needed 
to generate the ouftmt can be reduced significantly. 
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